You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PluginsArea: what it touches
Bug FixesKind: in v2.1.232,
Bug FixesSection of the release
What
The summary that lists up to two failed plugins with s.reason || s.error || "unknown error" now strips control and bidirectional-text characters from each plugin name and truncates it at 200 characters, so a hostile name cannot inject terminal escape sequences.
Details
A related plugin path helper gained a PathUnverifiableError class carrying a code.
Evidence
unknown error
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
